CVE-2026-20192: Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20192 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
The affected products identified are Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC). The provided information does not specify affected software versions or configurations.
What level of attacker access is indicated by the severity data?
The vector indicates network-based exploitation with low attack complexity, requiring no privileges or user interaction. It also indicates potential impact to confidentiality, integrity, and availability, with scope change.
Are mitigations available if an update cannot be applied immediately?
The provided information does not describe any mitigations, workarounds, or compensating controls.